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CLAIMS 

A method of forwarding packets in a communication 
system halving multiple ports, said method comprising: 

providing said system with multiple forwarding tables ; 
receiving said packets at one of said ports; 
selecting an appropriate forwarding table based on a 
source address x^i said packets; and 

forwarding said p^kets to one of said ports based on a 
destination address\in said packets and information in said 
appropriate forwarding table. 

2 . The method as defined in claim 1 wherein said 
packets are received at said ports by service interfaces which 
define realms each relatingYto a specific instance of an 
internetworking service funcDion. 

3 . A method as defined in\ claim 2 wherein said 
specific instance is a public Internet access service. 

4. A method as defined in cl^int 2 wherein said 
specific instance is a virtual private network (VPN) 
service - 



25 5, A method as defined in claim 4Vwherein said VPN 

service is a bridged and/or routed connectivity • service , 
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6. A method as defined in claim 4 wherein said VPN 
service is a network layer connectivity service: 

1 . A method as defined in claim 1 wherei\ii said 
internetworking devices include an ATM backplane 
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8 * A packet forwarder for a communication system 
comprising: 1 

a plurality of ports,- 

multiple Service interfaces providing inputs to said 
ports , said service interfaces including source «and 
destination addresses; 

multiple forwarding tables defining isolated realms to 
which said service interfaces belong based on said source 
information; and \ 

forwarding means to direct said service interfaces to an 
appropriate port based on the destination address and 
information in said forwarding table. 

9. A packet forwarder as defined in claim 8 wherein 
said plurality of ports VLnclude ingress ports and egress 
ports. \ 

10. A packet forwarder as defined in claim 8 wherein 
said isolated realms are assigned to specific network users. 

11. A packet forwarder \as defined in claim 8 service 
interfaces relate to physical\and logical connections. 

12. A packet forwarder as defined in claim 11 wherein 
said logical connections include multiple traffic flows from 
one or more ingress ports . \ 

13. A packet forwarder as defined in claim 8 wherein 
said isolated realms relate to 'a Specific instance of an 
internetworking .service function. \ 

14 . A system as defined in claim 13 wherein j said 
internetworking service function is 4 Public Internet access 

service. 

i 
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15. A system as defined in claim 13 wherein ; said 
internetworking service function is a virtual private 
network (VPN) service. 

16 . A system as defined in claim 15 wherein said VP*3 
service is a bridged and/or routed connectivity service . 

17. A. system as defined in claim 16 wherein said 
Internetworking service functions are provided over an ATM 
network. \ 

18 . A system as defined 16 wherein said 
internetworking devices support multiple protocols . 

19. A system as defined in claim 18 wherein said, 
internetworking devices provide services at both the packet 
and frame levels. \ 

20 . A system as defined \in claim 19 wherein said 
internetworking services are managed by a single service 
provider. \ 

21. A system as defined in\claim 19 wherein said 
multiple protocol over ATM (MPOA) \ service includes a MPOA 
client lookup cache management function. 

22 . A system as defined in ciaim a wherein one of 
said internetworking devices is an internetworking services 
card for providing routed and bridged) forwarding, services. 
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